How do exchanges like ShapeShift, Changelly or Evercoin cope with KYC/AML regulations?

They don't require any information about their users. Most of the exchanges requires user identification: so even though exchanges like ShapeShift might have corporate account on the large exchanges like Bittrex, Poloniex, Binance, shouldn't they disclose users' info to these large exchanges or governments?